Sun wrote the XACML interpreter that everyone uses. It interprets a core tree that JAXB builds from the XACML2 schema.<div><br></div><div>I have an alternative approach based on compilation not interpreting. The Xacml2.0 version started from JAXB but I eventually converted it to OpenSAML. The XACML3.0 version is still based on JAXB since OpenSAML doesn't support XACML3.0.</div>
<div><br></div><div>PDPs based on compiled XACML are available on <a href="http://forge.mil">forge.mil</a> under the name GOSAC-N along with working compilers (not sure about XACML3.0; possibly removed at the last minute). The compiler sources are NOT included; proprietary for now. Some early details are at <a href="http://bradjcox.blogspot.com">http://bradjcox.blogspot.com</a>.<br>
<br><div class="gmail_quote">On Mon, Mar 5, 2012 at 1:40 PM, Yang, Gang CTR (US) <span dir="ltr"><<a href="mailto:gang.yang.ctr@mail.mil">gang.yang.ctr@mail.mil</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Got it. Thanks! I wasn't expecting any PDP functions, but that is what I'm looking to do though, hopefuly with the help of OpenSAML lib. Would appreciate if anyone knows and can recommend an existing open source implementation of XACML.<br>
<div class="im"><br>
Gang<br>
________________________________________<br>
From: <a href="mailto:dev-bounces@shibboleth.net">dev-bounces@shibboleth.net</a> [<a href="mailto:dev-bounces@shibboleth.net">dev-bounces@shibboleth.net</a>] on behalf of Chad La Joie [<a href="mailto:lajoie@itumi.biz">lajoie@itumi.biz</a>]<br>
</div>Sent: Monday, March 05, 2012 12:31 PM<br>
<div class="HOEnZb"><div class="h5">To: Shib Dev<br>
Subject: Re: Does OpenSAML support profile of XACML 2.0?<br>
<br>
Sorry, binding as in XML binding. You can use OpenSAML to generate,<br>
or read, XACML messages. It does not, however, have any support for<br>
evaluating policies.<br>
<br>
On Mon, Mar 5, 2012 at 13:22, Yang, Gang CTR (US)<br>
<<a href="mailto:gang.yang.ctr@mail.mil">gang.yang.ctr@mail.mil</a>> wrote:<br>
> Thanks for the reply, Chad. But I'm not sure I understand what you mean by "binding support". Did you mean the SAML binding, as SOAP or HTTP POST binding? Doesn't supporting the profile of XACML 2.0 involve extending the assertion to include the extra statements and extending the protocol to support the extra queries?<br>
><br>
> Gang<br>
> ________________________________________<br>
> From: <a href="mailto:dev-bounces@shibboleth.net">dev-bounces@shibboleth.net</a> [<a href="mailto:dev-bounces@shibboleth.net">dev-bounces@shibboleth.net</a>] on behalf of Chad La Joie [<a href="mailto:lajoie@itumi.biz">lajoie@itumi.biz</a>]<br>
> Sent: Monday, March 05, 2012 11:18 AM<br>
> To: Shib Dev<br>
> Subject: Re: Does OpenSAML support profile of XACML 2.0?<br>
><br>
> It has binding support for it, yes.<br>
><br>
> On Mon, Mar 5, 2012 at 10:40, Yang, Gang CTR (US)<br>
> <<a href="mailto:gang.yang.ctr@mail.mil">gang.yang.ctr@mail.mil</a>> wrote:<br>
>> Does OpenSAML support the profile of XACML 2.0 with the assertion extension?<br>
><br>
><br>
> --<br>
> Chad La Joie<br>
> <a href="http://www.itumi.biz" target="_blank">www.itumi.biz</a><br>
> trusted identities, delivered<br>
> --<br>
> To unsubscribe from this list send an email to <a href="mailto:dev-unsubscribe@shibboleth.net">dev-unsubscribe@shibboleth.net</a><br>
> --<br>
> To unsubscribe from this list send an email to <a href="mailto:dev-unsubscribe@shibboleth.net">dev-unsubscribe@shibboleth.net</a><br>
<br>
<br>
<br>
--<br>
Chad La Joie<br>
<a href="http://www.itumi.biz" target="_blank">www.itumi.biz</a><br>
trusted identities, delivered<br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:dev-unsubscribe@shibboleth.net">dev-unsubscribe@shibboleth.net</a><br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:dev-unsubscribe@shibboleth.net">dev-unsubscribe@shibboleth.net</a><br>
</div></div></blockquote></div><br><br clear="all"><div><br></div>-- <br>Cell: 703-594-1883<br>Blog: <a href="http://bradjcox.blogspot.com">http://bradjcox.blogspot.com</a><br>Web: <a href="http://virtualschool.edu">http://virtualschool.edu</a><br>
Manassas VA 20111<br><br>
</div>